You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Random google search redirect

Yup, I have one too. Except, normally I can get rid of these things by myself! I identified some nasty files using MBAM, hijackthis, removed them. However, I still get occasional google search redirects.

Looks like this is a common problem, I've gone ahead and downloaded the applications recommended. Would greatly appreciate some help!

Note: If after running ComboFix you get this error message "Illegal operation attempted on a registry key that has been marked for deletion." when attempting to run a program all you need to do is restart the computer to reset the registry.===

Third party programs if not up to date can be the cause infiltration of an infection.

I'll go ahead and do update those things. In the meantime, still getting random google redirects. At first I thought it was "cured", I clicked ~50 links off google searches with no redirects. But once earlier, and once just now I got the same redirect problem as before.

I have none of these addons. Just to make sure though, I uninstalled a few. The only remaining add ons are ones I've used for years now without problems.

As for the router... if the router is the problem, then anything connected to the router should experience redirects as well, right? I'll test this more extensively tonight, but I've hooked my laptop into it since getting this redirect problem, and never experienced it on my laptop (same browser, same add-ons).

Please run ComboFix one more time. You will be prompted to update the tool please do.

Close the tool and execute this. It will clean your Java Cache.

Open notepad and copy/paste the text in the quote box below into it:

ClearJavaCache::

Save this as CFScript.txt on your desktop.

Referring to the picture above, drag CFScript into ComboFix.exeThen post the resultant log.

==

If still redirected please run this tool.

>>> Download to your DesktopGooredFix by jpshortstuff from here or hereEnsure all Firefox windows are closed and right-click on GooredFix.exe and select Run As Administrator. Click Yes when prompted to run the scan.GooredFix will check for infections, and then a log will appear and can also be found on your desktop, called GooredFix.txt.Please copy and paste the contents of this log in your next reply.

p.s. On a Vista or Windows 7 computer right-click and select Run As Administrator.

The article you found is an advertisement for spyhunter which is a for-pay antivirus program. However, I tried it anyway because even though it won't remove the viruses, it still lists all the stuff you're infected with. Found I was infected with the 7search redirect virus, if that helps.

Lets block these using the Hosts file.click.livesearchnow.comlivesearchnow.com

By default, if you try to modify your hosts file in Vista or Window 7, it will not let you save it. It tells you that you don't have permission. To successfully modify the hosts file, run Notepad.exe as an administrator and open the file.

1) Browse to Start -> All Programs -> Accessories2) Right click "Notepad" and select "Run as administrator"3) Click "Continue" on the UAC prompt4) Click File -> Open5) Browse to "C:\Windows\System32\Drivers\etc"6) Change the file filter drop down box from "Text Documents (*.txt)" to "All Files (*.*)"7) Select "hosts" and click "Open"8) Make the needed changes and close Notepad. Save when prompted.